b734cf54ed
auto-updated agent/uiserver/bindata_assetfs.go from commit adbd6c0c8
2020-12-03 09:19:50 +00:00
57210a59c3
connect: Fix a case where the active root would get unset even when there wasn't a new one
2020-12-02 11:42:23 -08:00
4ee15914b0
auto-updated agent/uiserver/bindata_assetfs.go from commit e23b5b003
2020-12-02 15:53:16 +00:00
a814338374
auto-updated agent/uiserver/bindata_assetfs.go from commit 9ac7bc180
2020-12-02 15:46:59 +00:00
297210ad93
auto-updated agent/uiserver/bindata_assetfs.go from commit a5b9ada9a
2020-12-02 09:49:40 +00:00
af9687e0b8
auto-updated agent/uiserver/bindata_assetfs.go from commit cf38309f6
2020-12-01 15:49:06 +00:00
91d5d6c586
Merge pull request #9009 from hashicorp/update-secondary-ca
...
connect: Fix an issue with updating CA config in a secondary datacenter
2020-11-30 14:49:28 -08:00
c5167cf9c4
Use a buffered channel for CA intermediate renew func
2020-11-30 14:37:24 -08:00
149e1e5f13
auto-updated agent/uiserver/bindata_assetfs.go from commit afe0f2614
2020-11-30 18:47:37 +00:00
45f7de452f
auto-updated agent/uiserver/bindata_assetfs.go from commit b5abbf122
2020-11-30 17:33:21 +00:00
58797598dc
auto-updated agent/uiserver/bindata_assetfs.go from commit d1ebe8c14
2020-11-30 17:27:35 +00:00
c03baa7b57
auto-updated agent/uiserver/bindata_assetfs.go from commit f46ef3e3f
2020-11-30 17:07:25 +00:00
4801228104
auto-updated agent/uiserver/bindata_assetfs.go from commit a59a2f860
2020-11-30 16:57:34 +00:00
2fd62ba8de
auto-updated agent/uiserver/bindata_assetfs.go from commit 9cf30e74e
2020-11-30 15:09:43 +00:00
17a86be022
Merge pull request #9284 from hashicorp/dnephin/agent-service-register
...
local: mark service as InSync when added to local agent state
2020-11-27 15:49:55 -05:00
4c5fab6e00
local: mark service and checks as InSync when added
...
If the existing service and checks are the same as the new registration.
2020-11-27 15:31:12 -05:00
8c5c6e77ec
fix serf_wan documentation ( #9289 )
...
WAN config is different than LAN config, source of truth is
f72d2042a8/config.go (L315-L326)
2020-11-27 20:49:43 +01:00
b6e469e1e9
auto-updated agent/uiserver/bindata_assetfs.go from commit 408174f3b
2020-11-27 15:45:17 +00:00
813f0d552d
Merge pull request #9247 from pierresouchay/streaming_predictible_order_for_health
...
[Streaming] Predictable order for results of /health/service/:serviceName to mimic memdb
2020-11-25 15:53:18 -05:00
09673426e3
Applied suggestions from @dnephin
...
* Renamed `cachedHealResultSorter` into `sortCheckServiceNodes`
* Use `<` instead of `strings.Compare`
* Single line comparison in unit test
2020-11-25 21:40:51 +01:00
6d6b6c15c6
server: fix panic when deleting a non existent intention ( #9254 )
...
* server: fix panic when deleting a non existent intention
* add changelog
* Always return an error when deleting non-existent ixn
Co-authored-by: freddygv <gh@freddygv.xyz>
2020-11-24 13:44:20 -05:00
293360339b
auto-updated agent/uiserver/bindata_assetfs.go from commit 6f8b5acbe
2020-11-24 17:51:46 +00:00
4039a19ed3
auto-updated agent/uiserver/bindata_assetfs.go from commit 9c3c7bcf3
2020-11-24 14:38:24 +00:00
25f9e232af
add missing descriptions for metrics
2020-11-23 22:06:30 +01:00
7a8844ccce
add entries for missing fsm operations and mark duplicated metrics prefixes as deprecated
2020-11-23 12:42:51 -08:00
a01f853aa5
Clean up the logic in persistNewRootAndConfig
2020-11-20 15:54:44 -08:00
3ea27d75e4
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs
...
Telemetry/fix missing and stale docs
2020-11-20 12:54:29 -08:00
9239df6dbd
[Streaming] Predictable order for results of /health/service/:serviceName to mimic memdb
...
This ensures the result is consitent with/witout streaming
Will partially fix #9239
2020-11-20 16:23:35 +01:00
26a9c985c5
Add CA server delegate interface for testing
2020-11-19 20:08:06 -08:00
4ad076207e
add telemetry and definition help entries for missing catalog and acl metrics
2020-11-19 13:29:44 -08:00
7bcbc59dea
command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint ( #9229 )
...
Fixes #9215
2020-11-19 15:27:31 -06:00
46205bbf27
remove stale entries and rename/define acl.resolveToken
2020-11-19 13:06:28 -08:00
22a0ab69ae
auto-updated agent/uiserver/bindata_assetfs.go from commit d913af2bb
2020-11-19 18:45:01 +00:00
e4e306210a
Require operator:write to get Connect CA config ( #9240 )
...
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.
--
This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
2020-11-19 10:14:48 -07:00
293ba9e0b5
auto-updated agent/uiserver/bindata_assetfs.go from commit 687ce1f9c
2020-11-19 16:13:04 +00:00
35c5f83ea3
Merge pull request #9224 from hashicorp/dnephin/fix-multiple-http-listeners
...
agent: fix bug with multiple listeners
2020-11-18 16:52:29 -05:00
8647483605
Use freeport
...
To prevent other tests which already use freeport from flaking when port 0 steals their reserved port.
2020-11-18 16:07:34 -05:00
75a1727b31
auto-updated agent/uiserver/bindata_assetfs.go from commit 591a96d5b
2020-11-18 19:07:25 +00:00
fc07c63974
auto-updated agent/uiserver/bindata_assetfs.go from commit 1edef424a
2020-11-18 19:00:19 +00:00
fed2a61dfc
agent: fix bug with multiple listeners
...
Previously the listener was being passed to a closure in a loop without
capturing the loop variable. The result is only the last listener is
used, so the http/https servers only listen on one address.
This problem is fixed by capturing the variable by passing it into a
function.
2020-11-18 13:03:29 -05:00
393d83dfa3
auto-updated agent/uiserver/bindata_assetfs.go from commit 664f1d9aa
2020-11-18 11:17:06 +00:00
c8d4a40a87
connect: update some function comments in CA manager
2020-11-17 16:00:19 -08:00
d9af48afce
Merge pull request #9160 from hashicorp/dnephin/go-test-race-in-to-out-list
...
ci: change go-test-race package list to exclude list
2020-11-17 13:13:38 -05:00
4bca029be9
Refactor to call non-voting servers read replicas ( #9191 )
...
Co-authored-by: Kit Patella <kit@jepsen.io>
2020-11-17 10:53:57 -05:00
4dfcdbab26
Merge pull request #9198 from hashicorp/mkcp/telemetry/add-all-metric-definitions
...
Add metric definitions for all metrics known at Consul start
2020-11-16 15:54:50 -08:00
95fa102195
auto-updated agent/uiserver/bindata_assetfs.go from commit fe728855e
2020-11-16 23:41:31 +00:00
2763833d32
Add DC and NS support for Envoy metrics ( #9207 )
...
This PR updates the tags that we generate for Envoy stats.
Several of these come with breaking changes, since we can't keep two stats prefixes for a filter.
2020-11-16 16:37:19 -07:00
36aaf86647
Merge branch 'mkcp/telemetry/add-all-metric-definitions' of ssh://github.com/hashicorp/consul into mkcp/telemetry/add-all-metric-definitions
2020-11-16 15:26:12 -08:00
4c30ebbb73
fix some tests that were broken from the TelemetryConfig change
2020-11-16 15:22:36 -08:00
7ec3ad5b73
linting: sort and group import
2020-11-16 14:17:24 -08:00
hashicorp-ci